Solved

Unable to send and receive Active sync email on Exchange Server 2010 using iPhone ?

Posted on 2014-10-29
6
813 Views
Last Modified: 2014-10-30
Hi All,

Can anyone here please assist me in the troubleshooting of this very strange issue of my IT support team member who has just joined the new company but unable to send and receive email in the iphone through Active Sync protocol ?

I have tried using other team members credentials in this one particular iphone, and it works as expected. New test account that I have created also works as expected. But his AD account is not.

From the Exchange email configuration, all I can see are all ticked (no password issue) in the iphone setup.

and this is the only failed entry from the EX RCA:

     Attempting the FolderSync command on the Exchange ActiveSync session.
       The test of the FolderSync command failed.
        Tell me more about this issue and how to resolve it
       
      Additional Details
       
Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).
HTTP Response Headers:
MS-Server-ActiveSync: 14.2
X-MS-RP: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,Search,Settings,Ping,ItemOperations,Provision,ResolveRecipients,ValidateCert
Content-Length: 1208
Cache-Control: private
Content-Type: text/html
Date: Thu, 30 Oct 2014 06:39:06 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Elapsed Time: 20949 ms.

So I'm not sure hwat else to do ?
0
Comment
  • 3
  • 3
6 Comments
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 40412667
He sounds like he is a member of one of the AD groups listed in my article and that will be causing the problem:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html

Please check and look at the Inherited Permissions will once unchecked will be magically put back hourly due to the group membership.

Alan
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 40412673
yes, I have look through the AD account Security tab | advanced, the Inheritable permission checkbox is not checked. SO what I need to do here ?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40412714
Well - if you enable it, then the phone will start to work, but hourly the permissions will be untucked due to the SDPROP process!

If you read my blog article, there is a way round this (but the recommended solution is 2 accounts - 1 as a user / 1 as an admin)!

https://alanhardisty.wordpress.com/2010/03/05/activesync-not-working-on-exchange-2010-when-inherit-permissions-not-set/
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 40412724
yes, so that's the thing, because this new user account is also part of DOMAIN Admins group, but how come the other  person account got no problem in ActiveSync ?

I've checked that the Activesync is already enabled.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40412798
Tick the box and let the phone sync.  After an hour - check to see if it still works.

Usually when the phone is setup, the tick isn't active and the account will add but not work because the relevant parts of AD don't get populated, but once the tick is enabled, AD can get updated and then things should work, but not sure for how long, but by the sounds of it, it could be a long time.
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 40414679
You are awesome dude !
this is a life saver from hours and hours of troubleshooting nightmare.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A brief look into what is, how to use, and how to make GIFs
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question